Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 17855

All 17855 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-72151 tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt 8.4 High 2026-08-15
CVE-2026-72149 dmaengine: tegra: Fix burst size calculation 7.5 High 2026-08-15
CVE-2026-72150 sunrpc: fix uninitialized xprt_create_args structure - - 2026-08-15
CVE-2026-72148 dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK 8.8 High 2026-08-15
CVE-2026-72147 dmaengine: dw-edma-pcie: Reject devices without driver data - - 2026-08-15
CVE-2026-72145 platform/x86/intel/tpmi: use cleanup helpers in mem_write() - - 2026-08-15
CVE-2026-72146 dmaengine: sh: rz-dmac: Move interrupt request after everything is set up 8.4 High 2026-08-15
CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path 7.8 High 2026-08-15
CVE-2026-72143 platform/x86: ISST: Restore SST-PP control to all domains 7.1 High 2026-08-15
CVE-2026-72142 i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) - - 2026-08-15
CVE-2026-72141 i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) 7.5 High 2026-08-15
CVE-2026-72140 i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() - - 2026-08-15
CVE-2026-72138 xen/gntdev: fix error handling in ioctl - - 2026-08-15
CVE-2026-72139 tcp: defer md5sig_info kfree past RCU grace period in tcp_connect 9.8 Critical 2026-08-15
CVE-2026-72137 xfrm: nat_keepalive: avoid double free on send error 9.8 Critical 2026-08-15
CVE-2026-72136 xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink 8.8 High 2026-08-15
CVE-2026-72135 tpm: Make the TPM character devices non-seekable 7.8 High 2026-08-15
CVE-2026-72134 spi: imx: reconfigure for PIO when DMA cannot be started 7.8 High 2026-08-15
CVE-2026-72133 spi: uniphier: Fix completion initialization order before devm_request_irq() 8.4 High 2026-08-15
CVE-2026-72132 NFS: Charge unstable writes by request size, not folio size - - 2026-08-15
CVE-2026-72131 nvme-apple: Prevent shared tags across queues on Apple A11 - - 2026-08-15
CVE-2026-72130 nvmet-auth: reject short AUTH_RECEIVE buffers 9.8 Critical 2026-08-15
CVE-2026-72129 nvmet-rdma: handle inline data with a nonzero offset 9.8 Critical 2026-08-15
CVE-2026-72128 nvmet: fix refcount leak in nvmet_sq_create() - - 2026-08-15
CVE-2026-72127 netdev-genl: report NAPI thread PID in the caller's pid namespace - - 2026-08-15
CVE-2026-72126 can: isotp: use unconditional synchronize_rcu() in isotp_release() 7.8 High 2026-08-15
CVE-2026-72125 can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER 7.8 High 2026-08-15
CVE-2026-72124 can: isotp: serialize TX state transitions under so->rx_lock 8.8 High 2026-08-15
CVE-2026-72123 can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF 7.8 High 2026-08-15
CVE-2026-72122 can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure 7.3 High 2026-08-15

All 17855 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.